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Abstract — There has been a long history of using fuzzy lan- 
guage equivalence to compare the behavior of fuzzy systems, 
but the comparison at this level is too coarse. Recently, a finer 
behavioral measure, bisimulation, has been introduced to fuzzy 
finite automata. However, the results obtained are applicable only 
to finite-state systems. In this paper, we consider bisimulation 
for general fuzzy systems which may be infinite-state or infinite- 
event, by modeling them as fuzzy transition systems. To help 
understand and check bisimulation, we characterize it in three 
ways by enumerating whole transitions, comparing individual 
transitions, and using a monotonic function. In addition, we 
address composition operations, subsystems, quotients, and ho- 
momorphisms of fuzzy transition systems and discuss their 
properties connected with bisimulation. The results presented 
here are useful for comparing the behavior of general fuzzy 
systems. In particular, this makes it possible to relate an infinite 
fuzzy system to a finite one, which is easier to analyze, with the 
same behavior. 

Index Terms — Fuzzy automaton, fuzzy transition system, 
bisimulation, fuzzy language, homomorphism. 




Fig. 1. Fuzzy language equivalent systems may not be bisimilar. 



I. Introduction 

THE idea of fuzzy systems was originated by Zadeh in 
1965 |42|. One of the main research directions on fuzzy 
systems is to consider fuzzy systems as a generalization of 
nondeterministic automata or Petri nets and investigate them 
within the same conceptual framework as classical systems. 
As a natural generalization of nondeterministic automata, the 
mathematical formulation of fuzzy automata was first pro- 
posed by Wee in 1967 |38|. The basic idea in the formulation 
is that, unlike the classical case, a fuzzy automaton can switch 
from one state to another one to a certain (truth) degree, and 
thus it is capable of capturing the uncertainty appearing in 
states or state transitions of a system. In the literature up to 
now (see, for example, jT), (8), (12), (14), (19), (23), (28), 
p4) , (39), pTi), a great variety of types of fuzzy automata 
has been proposed in different modeling situations and the 
notion of fuzzy automata has proved useful in many areas 
such as learning control and pattern recognition. In parallel, 
various fuzzy Petri nets have been formulated and extensively 
investigated (see (4)-(6), (9), |[T8), (31) and the references 
therein). 

This work was supported by the National Natural Science Foundation 
of China under Grants 70890080, 60873061, and 60973004 and by the 
National Basic Research Program of China (973 Program) under Grants 
2007CB311003, 2009CB320701, and 2010CB328103. 

Y. Cao is with the Institute of Software, School of Electronics Engineer- 
ing and Computer Science, and the Key Laboratory of High Confidence 
Software Technologies, Peking University, Beijing 100871, China (e-mail: 
caoyz@pku.edu.cn). 

G. Chen is with the School of Economics and Management, Tsinghua 
University, Beijing 100084, China (e-mail: chengq@sem.tsinghua.edu.cn). 

E. Kerre is with the Department of Applied Mathematics and Computer 
Science, Ghent University, Krijgslaan 291 (S9), B-9000 Gent, Belgium (e- 
mail: etienne.kerre@ugent.be). 



When modeling a system by fuzzy automata (or fuzzy Petri 
nets), it is often possible to define multiple models of the same 
system. Given different fuzzy automaton models of a system, 
there is a need for some formal techniques that can be used to 
compare these models. A straightforward idea is to employ the 
concept of fuzzy language equivalence that stipulates that two 
fuzzy automata are equivalent if they accept the same strings of 
input symbols with the identical membership grade [14] , | ,19J , 
1 24 1, (28). Although this equivalence has been extensively used 



in both theory and application, it is sometimes considered to 
be too coarse. For example, the systems S and T in Fig. 
[T] are fuzzy language equivalent if we simply identify every 
state as being accepting, but their behavior is different: S can 
always choose between b and c after performing a, while T 
can only execute either 6 or c (but not both) after a. More 
seriously, fuzzy language equivalent systems can have different 
deadlocking behavior (inability to proceed). 

In fact, the above deficiency of fuzzy language equivalence 
is not due to fuzziness, but to nondeterminism. For classical 
nondeterministic systems, this matter has been satisfactorily 
resolved by introducing the important notion of bisimulation 
p7| , p9| . A bisimulation is a binary relation between discrete 
event systems like process algebras, Petri nets or automata 
models, associating systems which behave in the same way 
in the sense that one system simulates the other and vice- 
versa. Intuitively, two systems are bisimilar if they match each 
other's moves. Bisimulation equivalence allows one to relate 
bisimilar systems and to reduce the state space of a system 
by combining bisimilar states to generate a quotient system 
with an equivalent behavior but with fewer states. In the past 
two decades, bisimulation has been considerably extended to 
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probabilistic and stochastic systems (see, for example, Q, (3), 
| [T6|j , |22J, |26) and references therein). 

However, to our knowledge, few efforts, except the work 
||3), 132) , | |36| , have been made to consider the bisimulation for 
fuzzy automata, or more generally, fuzzy systems. Following 
the algebraic theory of classical automata, Petkovic introduced 
the concept of congruence for fuzzy automata in |32|. It turns 
out that such a congruence is exactly a bisimulation. Based on 
this concept, an improved minimization algorithm for fuzzy 
automata has been developed there. Recently, Buchholz has 
put forward a general definition of bisimulation for weighted 
automata over a generic semiring which includes well-known 
automata models as specific cases 1 3 1 . A partition refinement 
algorithm using a matrix notation is provided to compute 
the largest bisimulation for a given weighted automaton and 
a definition of "aggregated" automaton, corresponding to a 
quotient, is presented as well. By instantiating the semiring 
in the framework of 13J to the closed unit interval [0, 1] with 
binary operations max and min. Sun et al. investigated the 
forward and backward bisimulations for fuzzy automata p6) . 

It is worth noting that the methods in |3J, [ .32,| , p6) are 
applicable only to finite (finite-state and finite-event) fuzzy 
systems. It is clearly a limitation, because many fuzzy systems 
are (or should be seen as) infinite-state or infinite-event. For 
example, the dynamic fuzzy systems studied in pT| , fuzzy 
discrete event systems modeled by max-product automata f25l, 
and fuzzy stochastic automata [341 involve an infinite number 
of states and fuzzy automata for computing with all words 
in |8j require an infinite number of events. This observa- 
tion motivates us to introduce and explore the concept of 
bisimulation for general fuzzy systems which may be infinite- 
state or infinite-event. To this end, we model fuzzy systems 
as fuzzy transition systems (FTSs) and define bisimulation 
between them in this paper. An FTS is characterized by a 
(possibly infinite) set of states, including the initial state, a 
(possibly infinite) set of labels, and a set of fuzzy transitions. 
Although many formal description tools for fuzzy systems 
such as fuzzy Petri nets are not FTSs, it is possible to translate 
a system's description in one of these formalisms into the FTS 
representing its behavior 

FTSs are a natural generalization of the widely used for- 
mal models — labeled transition systems — in computer science 
pO) . On the other hand, they are an extension of fuzzy 
automata by allowing state set and label set to be infinite. FTSs 
and some probabilistic transition systems ||TT], | fT6| , | [26 | seem 
to be similar, but they have two major differences: One is that 
when a probabilistic transition system is put into operation, 
there is no vagueness in the current state, next state, and the 
extent to which they will be activated. At any time (upon 
each label), one and exactly one state will be activated with 
an implied membership value of 1. The other difference is that 
in a probabilistic transition system, the sum of the weights for 
some transitions (from the current state) should be one, whilst 
there is no such requirement for an FTS. 

We define the notion of bisimulation between FTSs based on 
a general binary relation, which is not necessarily an equiva- 
lence relation as required in Q, p2) , |[36| and makes it more 
convenient for bisimulation checking. Due to the relaxation 



of relation, we have to consider the so-called correlational 
pairs in place of equivalence classes in f3l, f32l, |'36l. As 
a result, the bisimulation equates two FTSs whenever they 
perform the same action with the same maximum possibility 
in each correlational pair. We show that the union of all 
bisimulations between two TFSs gives rise to the largest 
bisimulation, called bisimilarity. Bisimulation and bisimilarity 
are also characterized in two other ways: One is to compare 
individual transitions which does not involve correlational 
pairs; the other is based upon a suitable monotonic function 
which has the bisimilarity as the largest fixed point. These 
are just different formal presentations of the same thing, but 
they may help in understanding and checking bisimulation 
and bisimilarity. Further, we address composition operations, 
subsystems, quotients, and homomorphisms of FTSs and dis- 
cuss their properties connected with bisimulation. The results 
presented in the paper are helpful in comparing the behavior of 
FTSs. In particular, this makes it possible to relate an infinite 
fuzzy system to a finite one, which is easier to analyze, with 
the same behavior. 

The remainder of this paper is structured as follows. We 
briefly review some basics of fuzzy sets and introduce the 
concept of FTSs in Section II. Section III is devoted to the 
definition of bisimulation using correlational pairs and the 
existence of bisimilarity. We specialize the notion of bisimula- 
tion for equivalence relations and for fuzzy finite automata in 
this section. In Section IV, we characterize bisimulation and 
bisimilarity by comparing individual transitions and explore 
more properties of bisimulation. In Section V, by defining 
a monotonic function we give a necessary and sufficient 
condition for a relation to be a bisimulation and show that 
bisimilarity is exactly the largest fixed point of the function. 
The notions of subsystems, quotients, and homomorphisms 
of FTSs and their properties connected with bisimulation are 
addressed in Section VI. The paper is concluded in Section 
VII with a brief discussion on the future research. 

II. Fuzzy Transition Systems 

In this section, after briefly recalling a few basic facts on 
fuzzy set theory, we present fuzzy transition systems (FTSs) 
as a basic model for some fuzzy systems. 

Let X be a universal set. A fuzzy set A, or rather a fuzzy 
subset A of X, is defined by a function assigning to each 
element x of X a value A{x) in [0,1]. Such a function is 
called a membership function, which is a generalization of the 
characteristic function associated to a crisp subset of X; the 
value A{x) characterizes the degree of membership of x in 
A. The support of a fuzzy set A is a crisp set defined as 
supp(A) = {x X : A{x) > 0}. Whenever supp(A) is a 
finite set, say supp(A) = {xi,X2, ■ ■ ■ ,Xn}, we may write A 
in Zadeh's notation as 

Xi X2 Xn 

A fuzzy subset of X can be used to formally represent a 
possibility distribution on X. We denote by J^{X) the set of 
all fuzzy subsets of X. 
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For any A, B G ^{X), we say that A is contained in B (or 
B contains A), denoted hy A C B, if A{x) < B{x) for all 
X £ X.We say that A ^ B if and only if A C i? and B C A. 

For any family A.^, i £ I, of elements of [0, 1], we write 
Vig/Ai or V{Ai : i £ 1} for the supremum of {Aj : i G I}, and 
Aig/Ai or A{Ai : i £ 1} for the infimum. In particular, if I is 
finite, then Vi^jXi and Aig/A; are the greatest element and the 
least element of {A^ : i £ I}, respectively. For any ^ £ J-{X) 
and U C X, the notation fJ,{U) stands for Vxeul^i^)- Given 
A,B £ T{X), the union of A and B, denoted A U B, is 
defined by the membership function 

{A\JB){x) ^A{x)y B{x) 

for all X £ X\ the intersection of A and B, denoted A H B, 
is given by the membership function 

{Ar\B){x) =A{x)hB{x) 

for all X £ X. 

Recall that a labeled transition system consists of a set S 
of states, a set A of labels, a transition relation — s-C S x 
Ax S, and an initial state sq £ S (cf. |20|). Such a transition 
relation is equivalent to a multi-valued mapping from S k A 
to 5, i.e., a mapping from 5 x A to V{S), the power set 
of S*. If the label set is a singleton, the system is essentially 
unlabeled, and a simpler definition that omits the labels is 
possible. Fuzzy transition systems are a natural generalization 
of labeled transition systems and can be thought of as weighted 
graphs, possibly with an infinite number of vertices or edges. 

Definition 1: h fuzzy transition system (FTS) is a four-tuple 
S — {S, A, S, So), where 

(1) 5 is a finite or infinite set of states, 

(2) A is a finite or infinite set of labels, 

(3) 6, the fuzzy transition function, is a mapping from SxA 
to J-{S), or equivalently a fuzzy multi-valued mapping 
from S X A to S, and 

(4) So, a member of S, is the initial state. 

An FTS is said to be finite if both S and A are finite, 
and infinite otherwise. Labels can represent different things 
depending on the language of interest. Typical uses of labels 
include representing input expected, conditions that must be 
true to trigger the transition, or actions performed during the 
transition. Intuitively, if the FTS is in state s £ S and the label 
a £ A occurs, then it may go into any one of the states s' £ S, 
and the possibility degree of going into s' is S{s,a){s'). In 
other words, S{s, a)(s') > means that there exists a transition 
from s to s' with label a and possibility degree d{s, a)(s'). For 
clarity, we sometimes use the more suggestive notations like 

s — ^ and s s' to denote S{s, a) = fi and S{s, a)(s') = 
7, respectively. In the obvious way, we can identify any fuzzy 
transition function 6 : S x A — > T{S) with a fuzzy relation 
— >s: S xAxS — ^ [0, 1]. 

For example. Fig. |2] depicts a finite FTS S = 
{{sq, si, S2, S3, Si}, {a,b,c},ds, So) and an infinite FTS T = 
({^0, ti,t2, ■ ■ ■}, {a}, 6f, to), where an arc, say from to Sj 
with label a\x in S, means that Ss{si,a){sj) = x. 

Clearly, a labeled transition system is a special FTS that 
has and 1 as the possibility degrees. We remark that there 




Fig. 2. A finite FTS iS and an infinite FTS T. 

are many probabilistic versions of labeled transition systems. 
Among others, discrete probabilistic transition systems intro- 
duced by Larsen and Skou |22| are the most relevant to FTSs 
above; they can be viewed as a special FTS that has probability 
distributions as the codomain of fuzzy transition function. 
Nevertheless, the semantics of probabilistic transition systems 
and FTSs are rather different: The weight of a transition in a 
probabilistic context reflects a frequency of occurrence, while 
the weight in a fuzzy context describes the membership grade 
(namely, uncertainty) of a target state. It is well known that 
probability theory is not capable of capturing uncertainty in 
all its manifestations. 

For each s £ S, we associate to s a fuzzy language £f , 
which captures the behavior of S starting at s. Formally, £f 
is defined as a fuzzy subset of A* , the set of all finite strings 
over A (including the empty string e), and given by 

C'',{w) = y,,^s5{s,w)[s'), 

where 5{s,w){s') is inductively defined as follows: 

^(^'')(^')^{ i; otherwise 

5{s, ua){s') = ys"es[5(s, u)(s") A 5{s" , a){s')]. 

In particular, the fuzzy language C^^ associated to the initial 
state So of S is also called the fuzzy language generated by 
S. Let Si = {Si,A,5i,Soi) be an FTS and Si £ Si, where 
i — 1,2. The states si and S2 are said to fuzzy language 
equivalent if Cfl = Cf^. For instance, if S and T are the 
FTSs in Fig. [2] we can get by a routine computation that 
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For labeled transition systems, one can build an overall 
system by building its component transition systems first and 
then composing them by some operators. Therefore, compo- 
sitional operators can serve the need of modular specification 
and verification of systems. As an example, let us focus 
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Fig. 3. FTS iS' and the parallel composition cS|cS'. 

on a parallel composition operator on FTSs, in which the 
synchronization occurs on a set of synchronizing labels; more 
operators can be found in ||3J, |40) . 

Given two FTSs Si = {Si, Ai,Si, sqi) and ^2 = 
{S2, A2, 62, S02), the labels that are intended to synchronize 
are listed in the set Ai n A2 and the rest of the labels can 
be performed independently. More concretely, the parallel 
composition of Si and ^2 is a four-tuple 

Si\S2 = (5'i X S2,AiUA2,S, (soi,so2)), 

where for all (si, S2), (s'l, S2) G S'l x 5*2 and a e Ai U A2, 

S{{si,.S2),a)iis'i,4)) = 

Si(si,a){s[) A S2{s2,a){s'^), if a e Ai n ^2 

Si{si,a){s'i), if a e Ai\A2 and s'2 — S2 

<52(s2, a)(s2)i if a e A2\Ai and s'l = si 

0, otherwise. 

Clearly, this constructs an FTS iSi|52, which represents that 
the systems Si and ^2 are running concurrently. The synchro- 
nization constraint Ai D A2 forces some labels to be carried 
out by both of the systems at the same time and allows all the 
possible interleavings of the other labels of the two systems. 
For example. Fig. [3] shows a parallel composition of S in Fig. 
[2] and the FTS S' given here. 

In the literature, there are a large number of formal descrip- 
tion tools for dynamic fuzzy systems such as various fuzzy 
automata (I), |[12), gS), Q, gl), fuzzy Petri nets @, 
Q, fyi\ , fuzzy control system s |fTO| , fTS] , ||30l, fuzzy discrete 
event systems |j7), |[T^, p5| , ||33|, neuro-fuzzy systems p7) , 
and so on. In general, they are not FTSs, but it is possible to 
translate a system's description in one of these formalisms into 
the FTS representing its behavior Among others, it is perhaps 
the simplest for fuzzy automata since they themselves are a 
special class of FTSs. For comparison, we are ready to review 
a kind of fuzzy automata, which has been known as max-min 
automata in some mathematical literature (19), (35). 



A fuzzy automaton is nothing other than a finite FTS with a 
fuzzy final state set. More precisely, it is formalized as follows. 

Definition 2: A fuzzy automaton is a five-tuple M = 
{Q,j:,S,qo,F), where: 

(1) Q is a finite set of states. 

(2) S is a finite input alphabet. 

(3) 6, the fuzzy transition function, is a function from QxT, 
to J^{Q) that takes a state in Q and an input symbol in 
E as arguments and returns a fuzzy subset of Q. 

(4) qo, a member of Q, is the initial state. 

(5) F is a fuzzy subset of Q, called the fuzzy set of final 
states and for each q G Q, F{q) indicates intuitively the 
degree to which g is a final state. 

Denote by E* the set of all finite strings constructed by 
concatenation of elements of E, including the empty string e. 
The fuzzy language Cm accepted by M is defined as a fuzzy 
subset of E* and given by 

Cm{w) = WgeQ[5{qo,w){q)AF{q)]. 

Clearly, for any fuzzy automaton M = {Q,Y,,S,qo, F), we 
have that Cm C^^f , where Sm ^ {Q,^,S,qo). 

III. BiSIMULATION 

In the literature (3), (32) , (36) , the notion of bisimulation 
has been extended to fuzzy finite automata, in which it is 
an equivalence relation on the state set of the underlying 
automaton. In this section, we introduce a general definition of 
bisimulation for FTSs which is not necessarily an equivalence 
relation and can be applied to compare different classes of 
models. 

To state the key definition, we need the following notion. Let 
Si = {Si,A,Si,soi), i — 1,2, be an FTS. For a binary relation 
R C Si X S2, we use tti and 7r2 for the canonical projections 
of R on S'l and S'2, respectively. More concretely, ni{R) = 
{s e Si : (s, i) e i? for some t e S2} and 7r2(i?) = {t G S2 : 
(s, t) e R for some s e Si}. A pair {U, V) with [/ C Si and 
1^ C S2 is called R-correlational if 'k^'^{U) = i^2^{^)^ where 
7rfi(i7) = {{s,t) G i? : s e [/} and tt2^{V) = {{s,t) G R : 
t G V}. If S'l — S2 and R is an equivalence relation, it is easy 
to check that ([/, V) is i?-correlational if and only if U = V = 
IJ,- Ci for some equivalence classes Ci G Si/R, where we are 
writing Si/R for the set of all equivalence classes induced by 
R. 

Definition 3: Let Si — (Si, A, 61, sqi) and ^2 = 
{S2,A, 62, S02) be two FTSs. A relation i? C Si x S2 is called 
a bisimulation between Si and ^2 if for all (s,<) G R and 
a€ A, 

(1) s — ^ ^ in Si implies t — ^ rj in ^2 for some rj G ^(S2) 
such that /i(C/) = ^{V) for every i?-correlational pair 

{u,y)- 

(2) t — !• 77 in 52 implies s — > /i in Si for some ji G ^(Si) 
such that /i(C/) = ri{V) for every i?-correlational pair 

(c/,y). 

Two states s G Si and i G S2 are bisimilar, denoted s ^ t, 
if there exists a bisimulation R between Si and ^2 such that 
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Fig. 4. Two bisimilar FTSs. 

(s,t) G R. Two FTSs Si and ^2 are bisimilar, denoted Si ^ 
S2, if their initial states sqi and S02 are bisimilar 

Intuitively, if two FTSs are bisimilar, then it is possible 
for each to simulate, or "track", the other's behavior. More 
specifically, for a relation to be a bisimulation, related states 
must be able to "match" transitions of each other by moving 
to related states with the same possibility degree. Bisimulation 
has a number of pleasing properties. For example, bisimilar 
FTSs generate the same fuzzy language, which will be proven 
later, and moreover, they must have the same "deadlock 
potential". 

Example 1: Fig. [4] describes two bisimilar FTSs: S given in 
Fig. [2] and S/ ^ defined here, in which we use dashed arrows 
to relate the states in a relation R = {(sqi [sq])- (sii [si\), 
(s2, [si]), (s3, [53]), (s4, [S3])}. By definition, it is easy to 
check that i? is a bisimulation. Therefore, S and 5/ ^ are 
bisimilar. Two other bisimilar FTSs involving infinite states are 
shown inFig.|5] where R = {(so,io), (5,^2), (5,^3), • ■ •} gives 
rise to a bisimulation between the FTS S defined here and the 
FTS T in Fig. |2] The importance of this simple example lies 
in that an infinite FTS may be related to a finite one with the 
same behavior 

Like the notion of bisimulation in concurrency theory, 
bisimulation here is preserved by various operations on re- 
lations. Let i? C S* X r and Q C r X [/. Recall that the 
inverse R^^ of R and the composition RoQ of R and Q are 
defined by 

i?"^ = {{t,s) : {s,t) e R} and 
RoQ = {(s,u) : 3f e T such that (s,t) e i?, e Q}, 

respectively. 

We can now state the following proposition. 
Proposition 1: Let S, Si, S2, and ^3 be FTSs. 
(1) The diagonal A5 = {(5,5) : s G 5} is a bisimulation 
on S. 



S T 




Fig. 5. Two bisimilar FTSs involving infinite states. 



(2) If i? is a bisimulation between Si and ^2, then R~^ is 
a bisimulation between ^2 and Si. 

(3) If Ri and R2 are bisimulations between Si and ^2, then 
so is Ri U i?2. 

(4) If i? is a bisimulation between Si and ^2, and Q is 
a bisimulation between ^2 and ^3, then i? o Q is a 
bisimulation between Si and ^3. 

Proof: See Appendix A. ■ 

Let us point out that the intersection of two bisimulations is 
not necessarily a bisimulation. A simple counterexample is as 
follows: Let S — {S — {sq, s, t}, A — {a}, S, sq) be an FTS, 
where 6{so, a){s) — 6{so, a){t) = 0.8 and S takes values for 
all other cases. Consider i?i = A5 — {{sq, sq), {s, s), {t,t)} 
and i?2 = {(soi sq)) {s, t), {t, s)}. It is easy to check that both 
Ri and R2 are bisimulations on S, but their intersection Ri n 
R2 = {{sq, Sq)} fails to be a bisimulation on S. 

A bisimulation between an FTS S and itself is called a 
bisimulation on S. A bisimulation equivalence is a bisimula- 
tion that is also an equivalence relation. As a result, a bisim- 
ulation between different FTSs must not be a bisimulation 
equivalence. Nevertheless, it follows from Proposition [T] that 
the relation ^ on the set of all FTSs is an equivalence relation, 
that is, S ^ S, Si ^ S2 implies S2 ^ Si, and Si ^ S2 and 
^2 53 imply Si ^ 53. 

For bisimulation equivalence, we have the following char- 
acterization. 

Proposition 2: Let S = (5, A, 6, sq) be an FTS. If R is an 
equivalence relation on S, then the following are equivalent: 

(1) i? is a bisimulation on S. 

(2) For any (s,t) e R, S{s,a){C) = d{t,a){C) holds for 
all a G ^ and C G S/R. 

Proof: See Appendix A. ■ 

Recall that a partially ordered set {L, <) is called a complete 
lattice if every subset of L has a supremum and an infimum 
in iL,<)- The assertion (3) in Proposition [T| shows us a lattice 
structure on the set of all bisimulations between two FTSs. 

Corollary 1: Let Si and ^2 be two FTSs. Then the set of 
aU bisimulations between Si and ^2 is a complete lattice, with 
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the supremum and infimum given by 

\Jr, = \Jr„ 

i i 

y\y i?, = U"f^ : -R is a bisimulation and _R C Q Rj}. 

i i 

In particular, the union of all bisimulations between Si and 
^2 gives rise to the largest bisimulation, which is called a 
bisimilarity and is denoted by ^. Furthermore, the largest 
bisimulation on one and the same FTS is an equivalence 
relation, as shown below. 

Corollary 2: Let ^= : i? is a bisimulation on S}. 

Then ~ is an equivalence relation on S. 

Proof: The reflexivity, symmetry, and transitivity of ~ 
follow directly from the assertions (1), (2), and (4) in Propo- 
sition [T] respectively. ■ 

The following observation shows that the operation of 
parallel composition is commutative. 

Proposition 3: Let Si ~ (S*!, Ai, ^i, sqi) ™d 52 = 
(S'2,^2,<52,so2) be two FTSs. Then Si\S2 ^ S2\Si. 

Proof: It is straightforward by verifying that R = 
{((si, S2), (s2, si)) : (si,S2) e Si X S2} is a bisimulation 
between iSi|iS2 and iS2|5i. We thus omit the details. ■ 

Let us end this section with a special bisimulation for fuzzy 
automata (cf. ||3|, ||36)). 

Definition 4: Let Mi = {Qi,Y^,di,qoi,Fi), z = 1,2, be a 
fuzzy automaton. A relation R C Qi x Q2 is a bisimulation 
between Mi and M2 if 

(1) i? is a bisimulation between (Qi, S, goi) ™d 
((52, S, (52, (702) in the sense of Definition |3] 

(2) Fiiqi) = ^2(92) for all (91,^2) e R. 

Two fuzzy automata Mi and A/2 are bisimilar if their initial 
states are related by a bisimulation. 

IV. An Alternative Definition of Bisimilarity 

This section is devoted to an equivalent definition of bisimi- 
larity. Based on this definition, we can explore more properties 
of bisimulation. In particular, as an example, we prove that 
bisimilarity can be preserved by parallel composition, which 
means that the behavior comparison of FTSs can be carried 
out compositionally. 

Let us begin with the following observation, which provides 
a sufficient condition for a relation to be a bisimulation. 

Proposition 4: Let Si — {Si, A, Si, sqi) and ^2 = 
{S2, A, 62,802) be two FTSs. A relation i? C 5*1 x 6*2 is a 
bisimulation between Si and S2 if for all {s,t) e R and 
a £ A, 

(1) if s s' for some s' G Si, then for any e > 0, there 

exists t' e ^2 satisfying t "'^'^ > t' , 7' > 7 — e, and 
{s',t') e R; 

(2) if t t' for some t' e ^2, then for any e > 0, there 
exists s' e Si satisfying s > s' , 7' > 7 — e, and 

{s',t') e R. 

Proof: See Appendix A. ■ 
For the necessity of the condition in Proposition]?] we have 
the following remark. 



S T 




Fig. 6. A bisimulation not satisfying the conditions in Proposition ]4] 

Remark 1: In general, not all bisimulations satisfy the 
conditions (1) and (2) in Proposition ]4] For example, con- 
sider FTSs S and T shown in Fig. ]6] Taking R ~ 

{(so,io), {s',t"), {s",t'), {s",t")}, it is not difficult to check 

that i? is a bisimulation by Definition [3] However, sq °^"'^> s' 
in S cannot be matched by a transition in T that satisfies the 
condition (1) in Proposition ]4] 

Nevertheless, the largest bisimulation ^ does satisfy the 
conditions (1) and (2) in Proposition]?] as shown below. 

Proposition 5: Let Si — {Si,A,5i,soi) and S2 — 
{S2, A, 82,802) be two FTSs. Then for every {s,t) and 
ae A, 

(1) if s ^'—^ s' for some s' G 5*1, then for any e > 0, there 

exists t' G 52 satisfying t "'^'^ > t' , 7' > 7 — e, and 
{s',t') G- 

(2) if t t' for some t' G ^2, then for any e > 0, there 
exists s' G Si satisfying s > s', 7' > 7 — e, and 

Proof: See Appendix A. ■ 
As a direct corollary of Propositions]?] and ]5] we see that the 
following definition of bisimilarity is equivalent to the original 
one introduced in Definition [3] 

Definition 5: Let Si ~ {Si, A,5i, soi) and 52 = 
(52, A, 82, S02) be two FTSs. Two states si G Si and S2 G ^2 
are bisimilar if there exists i? C 5i x ^2 such that (si , S2) G R, 
and moreover, for every {s,t) G R and a G A, 

(1) if s -^^^ s' for some s' G Si, then for any e > 0, there 

exists t' G 52 satisfying t > t' , 7' > 7 — e, and 

{s',t') G R; 

(2) if t -'^^ t' for some t' G 52, then for any e > 0, there 

exists s' G Si satisfying s > s', 7' > 7 — e, and 
{s',t') G R. 

In contrast with Definition |3] the above definition does not 
need to consider numerous i?-correlational pairs and is more 
convenient to determine bisimilar states. As an example, we 
now prove two properties of bisimilarity by using the new 
definition. 

Let us first show that bisimilar states are fuzzy language 
equivalent, as promised earlier. 

Proposition 6: Let Si = {Si, A,5i, s^i) and ^2 = 
(52, ^, i52, S02) be two FTSs. For any si G Si and S2 G 52, 
if si - 32, then C^l = Cf^ 
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Proof: See Appendix A. ■ 
It follows immediately from the above proposition that 
bisimilar FTSs generate the same fuzzy language, and fur- 
thermore, bisimilar fuzzy automata accept the same fuzzy 
language. As mentioned in Introduction, we point out that the 
converse of Proposition |6] is not true in general, even for crisp 
transition systems, which is well known in concurrency theory 
community. For the convenience of the reader, let us record 
a counterexample: Consider the FTSs S and T in Fig. [T] We 
see by definition that 

1 0.9 0.8 0.7 

— + — + —. 
e a ao ac 

However, it is obvious that sq ^ to since there is no any 

bisimulation containing (sqj^o)- Clearly, if the FTSs under 

consideration are deterministic in the sense that the support 

of each 5{s, a) has at most one element, then the converse of 

Proposition [6] actually holds. 

The following theorem shows that bisimilarity is preserved 
by the parallel composition operator defined in Section II, i.e., 
it is a congruence according to this operation. 

Theorem 1: Let Si — {Si, Ai, 5^., soi) and % = 
{T,,A,,Sr„tQ^), where i = 1,2. If Si - Ti and ^2 - Tz, 
then Si\S2 ~ 7i|72- 

Proof: See Appendix A. ■ 

We end this section with a discussion on Definition |5] One 
may have noted that introducing e into Definition |5] is not 
elegant. However, without e it makes really different, as we 
will see below. 

Definition 6: Let Si = {Si, A, Si, sqi) and ^2 = 
{S2,A, 62,802) be two FTSs. A relation i? C 5*1 x ^2 is called 
a strong bisimulation between Si and S2 if for all {s,t) E R, 
the following conditions hold: 

(1) if s s', then there is t' e S2 such that t t' 
with 7' > 7 and (s', t') e R; 

(2) if t then there is s' e Si such that s s' 
with 7' > 7 and (s',i') G R. 

Two states s E Si and t e S'2 are said to be strongly bisimilar, 
denoted s ~ if there exists some strong bisimulation R with 

{s,t) £ R. 

By definition, every strong bisimulation is a bisimula- 
tion in the sense of Definition [3] or, equivalently. Defini- 
tion |5] The converse, however, does not hold. The FTSs 
in Fig. |5] serve as a counterexample. The relation R — 
{{sQ,tQ), {s,t2), {3,13), . . .} is a bisimulation, but it is not 
a strong bisimulation; in particular, sq ^ to, but sq 9^ <o- 
Obviously, this non-coincidence of bisimulation and strong 
bisimulation arises from the infinite branches of a transition. 
In light of this, we can provide a sufficient condition for a 
bisimulation to be strong. To this end, let us introduce a notion. 

An FTS S = {S, A, S, Sq) is called image finite if for any 
s e S and a e A, the cai-dinaHty of {s' e S : 6{s, a){s') > 0} 
is finite. In other words, an FTS is image finite if every state 
has only finitely many outgoing transitions labeled by the same 
label. In particular, if the state set of an FTS is finite, then the 
FTS must be image finite. The following result shows that the 
notions of bisimulation and strong bisimulation are equivalent 
for image finite FTSs. 



Proposition 7: Let Si = {Si, A,Si, soi) and 52 — 
{S2, A, S2, S02) be two image finite FTSs. Then every bisim- 
ulation i? C 5i X 5*2 is a strong bisimulation. 

Proof: It follows directly from the definition of image 
finiteness. ■ 

The above proposition, together with Definition |5] gives 
an easy way to verify bisimulation for image finite FTSs. In 
particular, it is applicable to fuzzy finite automata. 

Corollary 3: Let Si = {Si, A, Si, sqi) and ^2 — 
{S2, A,S2, S02) be two image finite FTSs. Then two states 
si e 5i and S2 G ^2 are bisimilar if and only if there exists 
i? C 5*1 X S'2 such that {31,82) G R, and moreover, for all 
{s,t) e R and a e A, 

(1) if s s' for some s' G Si, then there exists t' G ^2 
satisfying t -"^^ t', 7' > 7, and {s',t') e R; 

(2) if t <' for some t' G ^2, then there exists s' e Si 
satisfying s > s', 7' > 7, and (s',t') € R. 

V. Fixed Point Characterization 

In this section, we describe the bisimilarity ^ as a fixed 
point to a suitable monotonic function. To this end, let us recall 
some notions and Tarski's fixed point theorem for subsequent 
use. 

Let {P,^) be a partially ordered set. A function / : P — s- 
P is said to be monotonic if for all Xi,X2 G P, Xi ^ X2 
implies that f{xi) ^ f{x2)- An element x G P is called a 
fixed point of / if a; = f{x). 

The following important theorem is due to Tarski fTl]. 

Theorem 2 (Tarski): Let {P,di) be a complete lattice and 
/ : P — > P a monotonic function. Then / has a largest fixed 
point /max and a least fixed point /,ni„ given by: 

/max = \/{xeP:X^f{x)}, 
/min - ^ ^ • /(^) ^ 

Let Si = {Si,A,6i,soi) and ^2 = {S2, A,S2, S02) be two 
FTSs. We first note that the set 'P{Si x S2) of binary relations 
between 5*1 and S2 ordered by set inclusion is a complete 
lattice with the set-theoretical union and intersection as the 
supremum and infimum, respectively. 

Next we define a function T ■.'P{SiX S2) — >'P{SiX S2) 
as follows: For any R e r{Si x S2), {s,t) e T{R) if and 
only if for any a £ A, the following hold: 

(1) if s — % 11 in Si, then there is t i] in ^2 for some rj e 
J-{S2) such that /i(C/) = f]{V) for every i?-correlational 
pair {U,V); 

(2) if t — % rj in ^2, then there is s — ^ fi in Si for 
some /i G ^(5*1) such that fJ,{U) — !]{¥) for every 
_R-correlational pair {U,V). 

The following proposition shows that the function F defined 
above is monotonic. 

Proposition 8: For any R, R' e 'P{Si x S2), if i? C R', 
then T{R) C T{R'). 

Proof: See Appendix A. ■ 

As all the conditions for Tarski's theorem are satisfied, we 
can now characterize the bisimilarity ^ as a fixed point of the 
function F. 
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Theorem 3: 

(1) A relation i? C x 52 is a bisimulation if and only if 

R C r(i?). 

(2) The bisimilarity ^ is the largest fixed point of F. 
Proof: See Appendix A. ■ 

As an immediate consequence of the above theorem, we 
have the following. 

Corollary 4: Define rO(S'i x ^a) = 5i x and r"+i(S'i x 

S2) = r(r"(5i X S2)). Then ^= n„>or"('5i X ^2). 

In particular, if both 6*1 and S2 are finite, then ^ is equal 
to r"(S'i X S2) for some n > 0. Note how this gives us an 
algorithm to calculate ^ for any given finite FTSs: To compute 
^, simply evaluate the non-increasing sequence r'^(S'i x ^2) 
for /c > until the sequence stabilizes. For some fuzzy finite 
automata, corresponding algorithms for computing ~ on one 
and the same fuzzy finite automaton have been provided in 
ID, |j32), ||36). 

VI. Subsystems, Quotients, and Homomorphisms 

Recall that the composition operation of FTSs seeks to build 
up more complex systems by combining simpler components 
in prescribed ways. On the contrary, the identification of 
subsystems and quotients is an analytic process, in which 
structure is to be sought in a previously existing FTS. Both 
subsystems and quotients are a special relationship between 
FTSs. More generally, it is possible to relate two FTSs via a 
homomorphism. This section is devoted to the notions of sub- 
systems, quotients, and homomorphisms and their properties 
involving bisimulations. 

Let us begin with the notion of subsystem. It describes the 
restrictive behavior of an FTS, in which a subset of states 
could be found which was closed under evolution. What that 
means is that states in the given subset would evolve only into 
each other and into no others. 

Definition 7: Given two FTSs Si = {Si, A,Si, sqi) and 
^2 — {S2, A, 62,802), we say that Si is a subsystem of ^2, 
written Si < S2, if 

(1) Si c ^2; 

(2) 62(31, a){s2) = for any Si G Si, a G A, and S2 & 
S2\Si; 

(3) 61 = 62\sixA- 

In the above definition, the notation (p\x' means that we are 
restricting the mapping ip defined on X to the smaller domain 
X'. 

Subsystems can be characterized in terms of bisimulations 
as follows. 

Proposition 9: Let St = (Si, A,6i, soi), i = 1,2, be an 
FTS. Then Si < S2 if and only if the diagonal As-^ of Si is 
a bisimulation between Si and ^2. 

Proof: See Appendix A. ■ 

The notion of homomorphism is defined as follows. 

Definitions: Let Si = (Si, A, 61, sqi) and 52 — 
{S2, A, 62,802) be two FTSs. A mapping / : Si — > S2 is 
called a homomorphism from Si to ^2 if the following hold: 

(1) /(Soi) = S02- 

(2) 62{fis),a)it) = V{6i{s,a)it') : f e 5i,/(t') = for 
any s £ Si, a E A, and t E S2- 



The homomorphism image of Si under a homomorphism 
/, denoted f{Si), is defined as (fiSi), A, 62\f(Si)xA, S02); it 
turns out that f{Si) is an FTS and moreover, f{Si) < S2- In 
particular, if Si < S2, the embedding mapping i : Si ^ S2 
gives rise to a homomorphism; the homomorphism image of 
Si under i is identical to itself. 

The kernel Ker(/) of a homomorphism / : Si — > S2 
consists of all pairs of states in 5i that have the same image 
under /, namely, 

Ker(/) - {{s,s') e Si x Si : f{s) = f{s')}. 

The binary relation Ker(/) is a bisimulation, as shown below. 

Proposition 10: If f : Si — > S2 is a homomorphism, then 
Ker(/) is a bisimulation on Si. 

Proof: See Appendix A. ■ 

Like subsystems, homomorphisms can also be characterized 
in terms of bisimulations. 

Theorem 4: Let Si = (^i, ^, <5i, sqi) ™d ^2 = 
{S2, A, 62,802) be two FTSs and / : 5*1 — > S2 a map- 
ping. Then / is a homomorphism if and only if its graph 
G(/) ~ {(s,/(s)) : 8 e 5*1} is a bisimulation between Si 
and ^2 that contains (sqi, S02). 

Proof: See Appendix A. ■ 

As an immediate consequence of the above theorem, we 
see that Si ^ S2 if there is a homomorphism relating them. 
Therefore, if the FTS Si is complex in some sense (for 
example, it has a large number of states), by homomorphism 
one may relate it to a simpler FTS without losing essential 
information about its behavior. 

The next proposition shows that both homomorphism and 
its inverse preserve bisimulations. 

Proposition 11: Let Si and ^2 be two FTSs and / : Si — !■ 
^2 a homomorphism. 

(1) If i? C 5i X 5i is a bisimulation on Si, then f{R) = 
{(/(s), /(s')) : {8,8') £ R} is a bisimulation on 52. 

(2) If i? C 5*2 X 52 is a bisimulation on ^2, then f^^{R) = 
{(s, s') : (/(s), /(s')) G R} is a bisimulation on Si. 

Proof: See Appendix A. ■ 
We now turn to the quotients of FTSs. According to the 
idea of equivalence relations, two or more states of an FTS 
might be regarded as being interchangeable. By aggregating 
interchangeable states, we get the quotient of the FTS. 

Definition 9: Let S — (5, A, 6, sq) be an FTS and R an 
equivalence relation on 5. The quotient of S with respect to 
i? is a four-tuple S/R^ {S/R, A, 6, [sq]), where 

(1) S/R is the quotient set, defined by S/R {[s] : ,s e 5} 
with [s] {s' e 5 : (s, s') e R}; 

(2) 6 : S/R X A — > F{S/R) is defined by 

<5(H,a)([s']) = W{6{8i,a){82) : Si G [s],S2 G [s']} 

for any [s] , [s'] e S/R and a e A. 
It is easy to check that the function 6 is well-defined. As a 
result, S/R is an FTS. In Fig. |4] we have presented an FTS 
S and its quotient with respect to the largest bisimulation ^— 

{(sq, So), (Sl, Si), (s2, S2), (S3, S3), (S4, 84), {81,82), (S2, Si), 
(S3,S4),(S4,S3)} on S. 
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Proposition 12: Let S = (5, A, (5, so) be an FTS and i? 
an equivalence relation on S. Then i? is a bisimulation on 
S if and only if the quotient map tt : S — > S/R gives a 
homomorphism from S to 

Proof: See Appendix A. ■ 

Noting that usually S/R has significantly fewer states than 
S, we may use the following result to reduce the number of 
states of S while retaining its behavior. 

Corollary 5: Let S = (S*, A, (5, sq) be an FTS and R a 
bisimulation equivalence on S. Then 5 ^ 

Proof: If i? is a bisimulation equivalence on S, then 
we know by Proposition [12] that the quotient map tt is a 
homomorphism from S to S/R. It therefore follows from 
Theorem [4] that S and S/R are bisimilar ■ 

The best choice of R in the above corollary is the bisim- 
ilarity ^, the largest bisimulation equivalence on S. Based 
on quotients, the following proposition gives a necessary and 
sufficient condition for R 

Proposition 13: Let S be an FTS and R a bisimulation 
equivalence on S. Then R if and only if the diagonal 
^s/R of S/R is the unique bisimulation equivalence on S/R. 
Proof: See Appendix A. ■ 



VII. Conclusion 

In this paper, we have introduced FTSs as a semantic model 
of some (possibly infinite) fuzzy systems. To compare two 
fuzzy systems at a finer level of "semantical sameness", bisim- 
ulation defined for fuzzy finite automata |j3], p2| , (j36) has 
been extended to general FTSs. Some new characterizations 
of bisimulation and bisimilarity have been provided. Following 
the standard study on algebraic structure, we have investigated 
the composition operations, subsystems, quotients, and homo- 
morphisms of FTSs. Many properties of bisimulation have 
been examined as well. 

There are some limits and directions in which the present 
work can be extended. In we have promised to compare 
the expressiveness of the two formal models of computing 
with words established in ||8] by utilizing bisimulation. 
In the study, we have found that it is necessary to consider 
bisimulation for infinite fuzzy systems since the above formal 
models of computing with words may have infinite labels, 
and moreover, we have realized that the nondeterminism in 
fuzzy Petri nets for computing with words [6] is different 
from those in fuzzy automata. This observation leads to the 
present paper as preliminary work along this way, and a 
convincing comparison of the expressiveness remains yet to 
be done. In addition, the paper has been concerned mainly 
with the theoretical development of bisimulation for FTSs. It 
is desirable to apply the results here to compare some practical 
fuzzy systems. In particular, one can use some variants of 
bisimilarity such as similarity to abstract from certain details 
of the fuzzy systems of interest. Finally, as we have seen, it is 
possible to relate an infinite fuzzy system to a finite one with 
the same behavior. It is interesting to give sufficient conditions 
for this kind of relevance. 



Appendix A 

Let us first prove Proposition [4] since it makes the proof of 
Proposition [T] more handy. 

Proof of Proposition |4j We only check the first condition 
in the definition of bisimulation, since the second one is 
symmetric. Suppose that s fi in Si. By the condition 
of the proposition, there exists an ?/ e J^{S2) such that 
t — !• 77. It remains to verify that fJ,{U) — !]{¥) for every 
i?-correlational pair {U,V). Without loss of generality, we 
assume, by contradiction, that /i(?7) > ri{V) for some R- 
correlational pair ([/, V). For simplicity, we write a and /3 for 
fJ.{U) and r]{V), respectively. That is, a = supg,^^ fi{s') and 
/3 = sup^i^Y rj{t'). Because a > /3 and a = sup^,gj; /i(s'), 

there is s' € U such that s s' with 7 > a — . Taking 
e = we get by the condition (1) that there exists t' G ^2 

satisfying t ^^^^^ t', 7' > 7 — e, and (s', t') e R. Hence, we 
have that 



> a 



7 > 7 — e 

a — /3 a ~ j3 

- ^>., 

namely, 7' > /3. On the other hand, it follows from (s', t') E R 
that 7' < supj/gy v{t') — ^ contradiction. As a result, we 
get that = v{^) for every i?-correlational pair {U,V). 

Consequently, i? is a bisimulation. ■ 
To prove Proposition [T] it is convenient to have the follow- 
ing lemma. 

Lemma 1: If R C R' C S1XS2, then every i?' -correlational 
pair ([/, V) is also i?-correlational. 

Proof: Assume that ([/, V) is i?'-correlational. Then we 
get by definition that 7r'^^(J7) = ""V^l^)' where we are 
writing tt' for the canonical projections with respect to R' . 
It yields that 



{(s, t)eR' -.seU}^ {{s, t)eR' -.te V}. 



(1) 



For any {s' ,t') e 7rf ^(C/) = {(s,<) e R : s e U}, we see that 
(s', i') e {(s, t) e R' :seU} since R C R'. It follows from 
Eq. ^ that {s',t') e {{s,t) e R' : t e V}, which means 
that t' e V. Therefore, we get that (s',t') £ {{s,t) e R : t e 
V} = TT^^iV). This proves that 7rf^(f/) C n^^V). By the 
same argument, we can prove the converse inclusion, and thus 
TT^^{U) = TT^^iV). Hence, {U, V) is i?-correlational. ■ 
Proof of Proposition^ Both (1) and (2) are trivial; we only 
prove the assertions (3) and (4). 

(3) For simplicity, let us write R for Ri U R2. For any 
{s,t) e R, there exists some i G {1,2} such that {s,t) £ Ri. 
Therefore, if s — > fi in Si, then we have that t — !• ry in ^2 
for some r; G ^(5*2) satisfying /i(C/) ~ vi^) for every Ri- 
correlational pair {U,V). By Lemma [T] each i?-correlational 
pair {U, V) is also i?i-correlational. Hence, it holds that for 
any _R-correlational pair {U,V), ti{U) = rj{V). Similarly, we 
can verify the other part in the definition of bisimulation. 

(4) Let us assume that (s, u) E RoQ. Then there is a < G ^2 

satisfying that (s, t) E R and (t. u) G Q. Now let s -"^^ s' 
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and e > 0. Then for e/2, there exist t' e 5*2 and 7" > 7 - e/2 

such that t -^^J^ t' and {s' ,t') e R. Further, for e/2, there 

exist u' e 5*3 and 7' > 7" — e/2 such that u "'^'^ > w' and 
{t',u') e Q. Consequently, we see that {s',u') G i? o Q and 

7' > 7" -e/2 

> J -e/2 -e/2 
= 7- 



w' in iSa, then for any e > 0, we can find 7' > 7— e 
> s' and (s', u') e /JoQ by a similar argument. 



as desired. 

If u > 

such that s 

Consequently, i? o Q is a bisimulation. ■ 
Proof of Proposition |2j Suppose that i? is a bisimulation 
on S. Since R is an equivalence relation on 5, we see that 
for any C G S/R, the pair (C, C) is i?-correlational. It thus 
follows immediately from the definition of bisimulation that 
(2) holds. Conversely, we only need to verify that 6{s, a){U) = 
d{t,a){V) for any i?-correlational pair {U,V). As R is an 
equivalence relation, we have that U — V — Uig/Ci for some 
Ci G S/R. It gives rise to 

S{s,a){U) = S{s,a){U^eIC^) 
^ V,g7<5(s,a)(C,) 
= V,6/<5(t,a)(C,) 
= S{t,a){U,eiC\) 
= S{t,a){V), 

namely, S{s,a){U) = d{t,a){V), as desired. ■ 

To prove Proposition [5] the notion of z-closure and a lemma 
will be handy. Following |1 1| , we say that a relation R C 

X 5*2 is z-closed if for all s, s' G Si and t, t' G S2, we have 
{s,t') G R whenever {s,t) G R, {s',t) G R, and {s',f) G R. 
Let us set, for n G IN, -Rq = i?, Rn+i = {(«, t') e Si x S2 ■ 
{s,t) G R,{s',t) G Rn,is\t') G 7? for some s' e Si,t e 
S2}, and R* ~ Une'^Rn- By definition, (s,t) G Rn if and 
only if there are sq, si, . . . , s„ G Si and to, ti, . . . ,tn G ^2 
such that So — s, = t, {si,ti) G R for all i < n, and 
(si+i,ti) G i? for all i < n. It turns out that R* is the least 
z-closed binary relation between Si and S2 that contains R. 

Lemma 2: Let Si — (iSi, v4, (5i) and ^2 — (5*2, A, (52) be 
two FTSs. If i? C 5*1 X 52 is a bisimulation, then so is R* . 

Proof By definition, we have that R* = Un^-^Rn- 
Therefore, to prove the lemma, it suffices to show that for 
all {s,t) G Rn and a G A, if s — > iig in Si, then there 
is a /it G J-{S2) such that t — > fit and HsiU) = Mt(^) 
for every i?„ -correlational pair ([/, V). This can be shown by 
induction on n. For the basis step, namely, rt = 0, it is trivial. 
Suppose now that (s,t) G Rn+i- Pick s' G Si and t' G ^2 
such that (s,t') G R,{s',t') G i?„, and (s',t) G i?. By the 
induction hypothesis and the fact that every i?-correlational 
pair is necessarily _R„ -correlational, we thus get that t' jit' 
and s' fis' such that fi^iU) = Ht'{V) = Hs'{U) = fit{V) 
for every i?„ -correlational pair {U, V). Whence, R* is a 
bisimulation, as desired. ■ 

Proof of Proposition^ Let us write R for ^. Since R is 
the largest bisimulation, it follows from Lemma |2] that R = 



R*. Suppose that {s,t) G R and s s' for some s' G 
^i. Then there is fi G ^(S'l) such that /i(s') = 7. Clearly, 
the label a can trigger the transition from t. Otherwise, by 
considering the i?-correlational pair ({s'},0), we find that R 
is not a bisimulation, which is contradictory. Therefore, there 
IS an 77 G T{S2) such that t 77. Set Vo = {f G ^2 : 
(s', i') G i?, ?7(i') > 0}. Because R is z-closed, we obtain that 
Vb 7^ 0. Suppose that (J7i,Vi) is the minimal i?-correlational 
pair satisfying {s'} C Ui and Vq ^ ^i- Hence, we have that 
7 < fJ.{Ui) = 77(^1), and furthermore, for any e > there 

exists some t' G Vi such that i f and 7' > 77(^1) — e > 
7 — e. Again, since i? is z-closed, we see that {s',t') G R. 
Therefore, the assertion (1) in the proposition holds; the other 
assertion is symmetric and we thus omit its proof. ■ 

Proof of Proposition p| To prove that C'^^ — Lf^, it is 
sufficient to show that Cf'^ (w) = Cf^ (w) for any string w G 
A* . We verify it by induction on the length of the string w. 

The basis step is for strings of length 0, namely, w = e. In 
this case, C'^^ (e) = 1 = C'^^ (e) by definition. Thus the basis 
step is true. 

The induction hypothesis is that £f^i (w) — C^^ (w) for all 
strings w with length no more than n. We now prove the 
same for strings of the form wa. By contradiction, let us 
suppose, without loss of generality, that C^^ (wa) > (wa) 
for some a G A. For simplicity, we set a = cf^ (wa) 
and /3 = Cf^{wa), that is, a ~ y s'eSi5i{si,wa){s') and 
P = y,„^s.A{s2,wa){s"). Note that > 0. By the 

definition of supremum, there exists an s' G 6*1 such that 



5i{si,wa){s') 



> 



4 

a- P 



> 



52{s2,wa){s" 



a-13 
4 



for all 



namely, 5i{si,'wa){s') > 62(32, wa){s") 
s" G 5*2. It follows from definition that Si{si,wa){s') = 
'^s[eSi[Si{si,w){s'i) A 6i{s'i,a){s')] and S2{s2,wa){s") = 
y s;,eS2[^2{s2,uj){s'2) ASi{s'2,a){s")]. Therefore, there is 
an s[ G Si such that 6i{si,w){s'i) A Si{s[, a){s') > 
52(52, A S2is'2,a){s") + ^ for all s^,s" G ^2. 

Using the induction hypothesis, we have that Si{si,w){s[) < 
y s',^eS2^2i^2,'w){s'2). This forces that Si{s[,a){s') > 
for all S2,s" G ^2. On the other 



-0 



52(4, 

hand, we see that 5i{si,w){s'i) > from the proven fact 
Si{si,w)is[)ASi{s'i,a)is') > (52(s2, w)(s2) A<52(4, a)(s") + 
It implies that there must be an s'2 G 5*2 such that 

a\Si{s[,a){s') 



Sn. Consider the transition 



and 



By the previous argument, there is no s" G S'2 such 

that S2 > s" and 7' > 5i{s[, a){s') — e, which contradicts 
the bisimilarity of s[ and Sj. The proof of the induction step 
is finished, as desired. ■ 
Proof of Theorem^ Let Ri C 5^ xTj be a bisimulation such 
that Si ^ %. We may assume that Ri satisfies the conditions 
of Definition |5] Consider R= {((si, S2), (ti, t2)) : (si,ti) G 
^1, (S2,t2) G R2} C (5i x S'2) X (Ti X T2). It follows that 
((soi,so2), (toi,to2)) e R- To show that Si\S2 ^ Ti|7^, it 
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suffices to verify that i? is a bisimulation between 5i|52 and 
Ti\T2. 

For any ((si, S2), (ti, ^2)) e R, if (si,S2) (si,^)' 
we now show that for any e > 0, there are 7' > 7 — e 

and (ti,t2) e Ti X T2 satisfying that (ii,i2) (^1,4) 
and ((s'l, S2), (i'l, ^2)) ^ ^- I^Y 'he definition of parallel 
composition, three cases need to be considered. 

Case 1: a e Ai n A2. In this case, since (si,S2) -"^^ 

(s'j^jSj), there exists 7,; > 7 such that Si ° s'^ for i = 
1,2. This forces that there exist 7^' > 7^ — e and G Ti 

such that t., t[ and (s^,t9 e i?., for i = 1,2. Taking 

7' = 7l A 7^, we see that 7' > 7 - e, (ti,t2) (^'1,^2). 
and ((s'i,S2), (^'1,^2)) ^ desired. 

Case 2: a G Ai\A2. In this case, we see that si — ^ s'j^ and 
S2 = S2. Hence, there are 7' > 7— e and i'j^ e Ti satisfying that 

h t[ and {s[,t[) e We thus have that (ii,<2) 
(ti,<2) and ((si,S2),(ii,i2)) e R- 
Case 3: a e A2\Ai. This is analogous to Case 3; we omit 

it. 

In a similar way, we can show that if (ii,i2) (^17^2)' 
then for any e > 0, there are 7' > 7 — e and {s'^, s'2) £ SiX S2 

satisfying that (si,S2) -^^^ (•s'i,S2) and ((s'l, S2): (*i: ^2)) € 
i?. This completes the proof of the theorem. ■ 

Proof of Proposition^ Suppose that (s,t) G r(i?) and 
s /i in 5i. Then by the definition of r(i?) there exists 
t — > r] in S2 such that /x(J7) = ?7(T^) for every i?-correlational 
pair (J7, T^). As J? C i?', it follows from Lemma [T| that 
/^(C/) = Tli^) for every i?' -correlational pair {U,V). Con- 
sequently, (s,i) e r(i?'), which means that r(i?) C T{R'), 
as desired. ■ 

Proof of Theorem^ The assertion (1) is simply a reformu- 
lation of the definition of bisimulation. 

For (2), we first show that ^ is a fixed point of F, that is, 
r(^) =^. Because ^ is a bisimulation, we obtain by (1) that 
r(^). It therefore follows from the monotony of F that 
F(~) C r(r(^)), which means that F(^) is a bisimulation. 
This forces that F(~) C^, since ^ is the largest bisimulation. 
Consequently, we have that F(~) =~. Furthermore, ^ must 
be the largest fixed point of F, since by (1) any fixed point 
of F is a bisimulation and ^ is the largest bisimulation. This 
completes the proof of (2). ■ 

Proof of Proposition^ For the necessity, suppose that Si < 
S2- Hence, C S'2. It follows that As^ = {(s,s) : s e 
Si} C SiX Si C SiX S2. For any (s, s) S As-, and a e A, if 

s — ^ t in Si, it forces that s — ^ t in 52 since Si = S2\sixA- 
Clearly, (i,t) e As^. Conversely, if s -^^^ t in ^2, we see 
that t £ Si because 62(3, a){t) = for every t e S'2\S'i by 
definition. Therefore, {t,t) e As, in this case. Again, since 

Si — S2\sixA, we have that s ^^^—U t in Si. Whence, As, is a 
bisimulation between Si and ^2. 

We now consider the sufficiency. Assume that A^^ is a 
bisimulation between Si and 52. It follows that Si C ^2 
by As, Q Si X 82- To prove that 52{si,a){s2) — for 
any si £ Si, a E A, and S2 G S2\Si, we suppose. 



by contradiction, that there exist s e Si, a E A, and 
t e S'2\5'i such that 52 (s, a){t) > 0. As i ^ 5*1, the ti-ansition 

a\So{s.a}{t) . „ , , , , ... 

s > t in 62 cannot be matched by any transition in 

51. Therefore, As, is not a bisimulation, which contradicts 
the hypothesis. It remains to verify that Si ~ S2\s,y.A- By 
contradiction, assume that there are s,t e 5*1 and a E A 
such that Si{s,a){t) > S2\s,xAis,a){t) ^ S2{s,a){t) or 
conversely, S2\s,xAis, a){t) = ^2(5, a){t) > Si{s, a){t). If the 
former inequality holds, then we can find that the transition 
s "I'^i^-^'"^^*)^ ^ jjj cannot be matched by any transition 
in ^2, while if the latter holds, we see that the transition 
s "l*^^*^^'")^*)^ ^ jjj ^2 cannot be matched by any transition 
in Si. In either case, it contradicts the assumption that As, is 
a bisimulation. Therefore, Si < S2. This completes the proof 
of the proposition. ■ 

Proof of Proposition [7q[ It is easy to see that Ker(/) is 
an equivalence relation on Si. For any {s,s') E Ker(/), 
a E A, and C E S'i/Ker(/), we obtain by the definition of 
homomorphism that 

Si{s,a){C) = \/tec5i{s,a){t) 

= S2{f{s),a){f{t)) 

= 52{f{s'),a){f{t)) 

= WtecSi{s',a)it) 

= Siis',a){C). 

It therefore follows from Proposition |2] that Ker(/) is a 
bisimulation on Si, finishing the proof. ■ 
To give the proof of Theorem]?] it is convenient to have the 
following lemma. 

Lemma 3: Let Si — (5*1, A, (5i, sqi) and 52 = 
(52, A^ S2, S02) be two FTSs. Suppose that i? is a bisimulation 
between Si and ^2. Then for any (s,t) E R and a e A, we 
have the following: 

(1) (5i(s,a)(s') < V{(52(t,a)(t') : t' E S2,(s',t') E R} for 
any s' E Si. 

(2) S2it,a)it') < V{(5i(s,a)(s') : s' E Si,{s',t') E R} for 
any t' E S2. 

Proof: (1) and (2) are symmetric, so we only prove 
(1). Set 7 = Si{s,a){s') and 70 = \J{52{t,a){t') : t' E 

52, {s',t') E R}. By contradiction, assume that 7 > 70. Then 
taking e = 7 — 70^ there exist 7' > 7 — e = 70 and t' E S2 

such that t t' and (s', f) E R. We thus see that 7' < 70, 
a contradiction. Hence, 7 < 70, as desired. This completes the 
proof of (1). ■ 
Proof of Theorem^ We prove the necessity first. Suppose 
that / : Si — > S2 is a homomorphism. Then we have 
that (soi,So2) e G{f). For any (s,/(s)) E G{f) and 

s s', we get by the definition of homomorphism that 

<52(/(s),a)(/(s')) = V{<5i(5,a)(s") : s" E SiJ{s") = 
f{s')}. Taking 7' = S2{f {s),a){f{s')), we see that 7' > 7-e 

for any e > 0, /(s) ^ /(«'), and e G(/). 

Conversely, if /(s) t, then 7 = S2{f{s), a)(t) — 

W{Si{s,a){s") : s" E Si,f{s") = t} by the definition of 
homomorphism. Thus, for any e > 0, there exists s' E Si 
such that f{s') — t and Si{s, a)(s') > 7 — e. That is, for any 
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e > 0, there exist 7' = Si{s, a){s') > 7 — e and s' e S such 

that s s' and (s',t) e G{f). So G(/) is a bisimulation 
between Si and 52- 

Next, to see the sufficiency, assume that G{f) is a bisim- 
ulation containing (sqi, so2)- By definition, we need to check 
that S2i.f{s),a){t) = V{,52(s,a)(s') : s' e = t} for 

any s G 5*1, a G A, and t G 52- Let 70 = V{5i(s, a)(s') : 
s' G 5i,/(s') = <} and 71 = S2{fis),a){t). Then we have 
that 71 < 7o by Lemma [3] On the other hand, for any s' G Si 
with f{s') — t, we get, again by Lemma [3] that 

5i{s,a){s') < y{52ifis),a){t'):t' ^f{s')} 
= S2if{s),a)it) 
= 11, 



which means that 70 < 71. Hence, 71 
proof of the theorem. 



7o, finishing the 



Proof of Proposition \nj (1) Let (/(s),/(s')) e f{R) and 
/(s) -^^^ We now show that for any e > 0, there exist 
7' > 7 - e and t' G 5 satisfying that /(s') -"^^ /(<') and 



{t,f{t')) G /(i?)- Since / is a homomorphism, there exists 
s" G S*! such that t = /(s")- By Theorem |4] we know that 
s G 5*1} is a bisimulation. Thus, there 

a|7i 



G(/) = {{s,f{s)) 

are 71 > 7 — e/3 and si G 5*1 such that s "> si and 
/(si) = i. It follows from {f{s)J{s')) G /(i?) that (s, s') G 
_R. Therefore, there exist 72 > 71 — e/3 and t' G 6*1 such 

that s' ^ and G i?. A gain, using the fact that 

G(/) is a bisimulation, there exists 7' > 72 — e/3 such that 

/(s') f{t'). Moreover, we have that 7' > 7 — e and 

{t,f{t')) = (/(si),/(t')) G /(i?). Similarly, we can prove 

that if /(s') -^^^ t, then for any e > 0, there exist 7' > 7 — e 

and t' G S*! satisfying that /(s) ^ /(t') and (t,/(t')) e 
f{R). The proof of (1) is completed. 

(2) It can be proved by imitating the proof of (1). ■ 



Proof of Proposition 12 ■ Suppose that i? is a bisimulation on 
S. By definition, we see that 7r(so) = [so]- For any s, s' G S' 
and a G A, it follows from Proposition |2] that 

6{s,a){\s']) = 6{s",a){[s']) 

for all s" G [s], which means that 

<5(s,a)([s']) = V,.g[,]<5(s",a)([s']). 

This forces that 

J(M,a)([s']) = 5{s,a)m = V{<5Gs,a)(0 : t' G [.']}. 

Therefore, vr is a homomorphism from 5 to 5/i? by definition. 
Conversely, if the quotient map tt : S — > S/R gives 



a homomorphism from S to S/R, then by Proposition 10 
the kernel Ker(7r) = {(s,s') e S x S : [s] ^ [s']} of tt 
is a bisimulation on S. Observe that Ker(7r) ^ R, so R 
is a bisimulation on S, which completes the proof of the 
proposition. ■ 



Proof of Proposition 13 We first show the necessity. By 
contradiction, suppose that Q is another bisimulation equiv- 
alence on S/R. Then there is ([s], [s']) G Q\Ag^jj, which 
means that [s] 7^ [s'], i.e., (s, s') ^ R. Since i? is a 



bisimulation equivalence on S, we get by Proposition [12] that 
the quotient map tt : S — > S/R is a homomorphism from 
S to S/R. By (2) of Proposition 11 we see that tt^^{Q) 
is a bisimulation on S. Since ^ is the largest one, we have 
that TT^^iQ) C--= R. Noting that (s, s') G 7r~i((3), we find 
that (s, s') G -R, a contradiction. Hence, Ag/^ is the only 
bisimulation equivalence on S/R. 

Now, we consider the sufficiency. Assume that Ag/^ is 
the unique bisimulation equivalence on S/R. Then Ag^jj is 
also the largest bisimulation on S/R. Let R' be an arbitrary 
bisimulation on S. Using Proposition 11 we know that tt{R') 
is a bisimulation on S/R. So 7r(i?') C A^/j^, which implies 
that for any (s, s') G i?', [s] = [./]. Therefore, (s, s') G i?, 
and thus R' C i?. It forces that R finishing the proof. ■ 
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